Hard-coded Credentials Vulnerability in Schneider Electric Easergy P5 Product

CVE-2022-22722

What is CVE-2022-22722?

A vulnerability exists in Schneider Electric's Easergy P5 product due to hard-coded credentials, which could lead to information disclosure. If an attacker gains access to the device's SSH cryptographic key, they may take control of the local operational network. This access allows them to observe and manipulate network traffic associated with the product's configuration, posing significant risks to network security and integrity.

References